Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
File: L4g71OpOPesouJSxkPjgi68G8cw.mft (raw, json)
Hash identifier: zRzFPs3JxBqJEHuqfu/T873bvjwbeaR+T3xTNE+hM7E=
Subject key identifier: 1B:9E:57:57:35:64:9A:37:9B:6D:9A:C0:14:CD:87:A6:0B:73:A2:FC
Authority key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
Certificate issuer: /CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Certificate serial: 0197B7B2E788A62CE99A9B77E7D4139B36E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
Manifest number: 0561
Signing time: Sat 28 Jun 2025 18:00:44 +0000
Manifest this update: Sat 28 Jun 2025 18:00:44 +0000
Manifest next update: Sun 29 Jun 2025 18:00:44 +0000
Files and hashes: 1: 72212ELi_xTfEeuyR3CUIU7otcg.roa (hash: 05TY+/FULQvb5YOeymsTjWCBkX5gY/8/tCWpzbv8PI0=)
2: L4g71OpOPesouJSxkPjgi68G8cw.crl (hash: JtwaW4DsWDa6JIq3jYFx0oFr1xb+3Z8oISdvUWKs7cU=)
3: rKcLia0y-4QlTSWH-I5frDT77pU.roa (hash: dvn3H9WJWj8AZKwySDQ1F4qo4Fa0dQjkVokla1Xiyhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:e7:88:a6:2c:e9:9a:9b:77:e7:d4:13:9b:36:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Validity
Not Before: Jun 28 18:00:44 2025 GMT
Not After : Jun 29 18:00:44 2025 GMT
Subject: CN=1b9e575735649a379b6d9ac014cd87a60b73a2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:32:1b:0b:a5:7a:e5:c0:92:5b:bc:fb:05:
38:cb:6e:1a:c4:e5:a3:e4:5d:53:7a:36:8a:62:20:
d3:93:36:46:4b:41:c9:79:bf:b5:56:54:c3:3b:53:
d0:ec:b7:32:af:94:97:5f:6b:f1:aa:38:33:be:e4:
53:f4:d9:25:19:a8:75:08:b1:3b:23:dd:ae:f6:a2:
20:34:7a:17:29:02:7b:77:d5:2b:01:d3:f3:ea:1e:
be:c6:ce:6a:7e:9f:37:69:30:c4:9d:b4:e2:fe:40:
f0:67:79:46:35:ef:40:e4:6f:d5:2d:ef:6b:c4:a9:
97:42:51:ed:a9:76:eb:e3:b3:97:5a:78:87:c1:55:
e0:fd:a4:67:92:ea:b9:86:fc:09:89:f8:2c:70:e9:
5b:78:ef:5e:e8:4d:29:98:5f:1b:2b:f2:41:c5:54:
63:7c:8e:39:cd:02:9f:13:06:4d:ec:31:39:2c:35:
e5:5f:2f:9e:9c:6a:9a:de:1c:b3:d3:ef:b7:0d:cf:
30:2c:6f:b8:b4:33:e5:db:52:2b:c7:3b:ae:1e:8c:
1b:ba:14:bf:78:1d:7e:55:69:56:b2:af:39:ab:ed:
5e:0f:fa:96:05:68:33:c2:30:ba:45:48:64:5c:b7:
1a:64:44:04:f7:4a:5e:0a:77:25:c5:b6:f2:9a:07:
77:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9E:57:57:35:64:9A:37:9B:6D:9A:C0:14:CD:87:A6:0B:73:A2:FC
X509v3 Authority Key Identifier:
keyid:2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e1:e7:01:87:02:e7:bc:51:49:54:dd:77:9b:4e:a4:ae:a4:
2b:d9:ff:17:30:a0:f1:cf:a4:9f:2b:9d:32:04:e0:86:43:44:
f3:7b:7c:9d:85:83:74:53:cd:a7:51:90:cb:37:b8:f7:94:de:
fb:61:88:0b:1c:c9:08:1d:8e:7c:90:d2:12:51:f5:69:41:a7:
86:56:93:9f:1f:bd:7a:97:f0:f3:a5:11:34:fc:e4:54:fb:c8:
a4:70:43:84:09:e3:f7:62:91:07:95:ef:7f:9c:23:c3:30:02:
a2:1d:3d:fa:a6:0f:fd:26:41:3e:ed:28:18:cc:84:8f:1c:ef:
35:2b:12:f0:4d:5e:08:82:08:ea:aa:1d:82:52:3b:51:76:b0:
11:7b:79:6c:de:d3:bf:eb:4f:2c:80:0c:26:67:a1:61:42:b6:
45:d1:84:a1:ef:54:aa:6d:09:02:20:92:27:2e:45:cd:69:20:
c8:38:14:e4:3a:de:f8:21:e1:f8:f0:fb:5b:c8:44:e3:f8:4d:
b7:95:0e:02:66:c3:7a:4d:67:a1:bb:aa:33:23:01:e7:f3:b3:
24:d4:f6:eb:d7:0a:70:89:05:37:d0:99:22:d9:60:0f:14:8a:
d4:d0:89:f2:0b:95:5a:9c:ab:c1:43:93:e1:3d:04:13:60:94:
0c:0b:46:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sueIpizpmpt359QTmzbhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODgzYmQ0ZWE0ZTNkZWIyOGI4OTRiMTkwZjhlMDhiYWYw
NmYxY2MwHhcNMjUwNjI4MTgwMDQ0WhcNMjUwNjI5MTgwMDQ0WjAzMTEwLwYDVQQD
EygxYjllNTc1NzM1NjQ5YTM3OWI2ZDlhYzAxNGNkODdhNjBiNzNhMmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4EyGwuleuXAklu8+wU4y24axOWj
5F1TejaKYiDTkzZGS0HJeb+1VlTDO1PQ7Lcyr5SXX2vxqjgzvuRT9NklGah1CLE7
I92u9qIgNHoXKQJ7d9UrAdPz6h6+xs5qfp83aTDEnbTi/kDwZ3lGNe9A5G/VLe9r
xKmXQlHtqXbr47OXWniHwVXg/aRnkuq5hvwJifgscOlbeO9e6E0pmF8bK/JBxVRj
fI45zQKfEwZN7DE5LDXlXy+enGqa3hyz0++3Dc8wLG+4tDPl21IrxzuuHowbuhS/
eB1+VWlWsq85q+1eD/qWBWgzwjC6RUhkXLcaZEQE90peCnclxbbymgd3KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBueV1c1ZJo3m22awBTNh6YLc6L8MB8GA1UdIwQY
MBaAFC+IO9TqTj3rKLiUsZD44IuvBvHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRnNzFPcE9QZXNvdUpTeGtQamdpNjhHOGN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iMzRkNmYtNjZkYy00NDk4LWIyMDUt
NzliNjczM2JjNWU2LzEvTDRnNzFPcE9QZXNvdUpTeGtQamdpNjhHOGN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9iMzRkNmYtNjZkYy00NDk4LWIyMDUtNzliNjczM2JjNWU2
LzEvTDRnNzFPcE9QZXNvdUpTeGtQamdpNjhHOGN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZeHnAYcC
57xRSVTdd5tOpK6kK9n/FzCg8c+knyudMgTghkNE83t8nYWDdFPNp1GQyze495Te
+2GICxzJCB2OfJDSElH1aUGnhlaTnx+9epfw86URNPzkVPvIpHBDhAnj92KRB5Xv
f5wjwzACoh09+qYP/SZBPu0oGMyEjxzvNSsS8E1eCIII6qodglI7UXawEXt5bN7T
v+tPLIAMJmehYUK2RdGEoe9Uqm0JAiCSJy5FzWkgyDgU5Dre+CHh+PD7W8hE4/hN
t5UOAmbDek1nobuqMyMB5/OzJNT269cKcIkFN9CZItlgDxSK1NCJ8guVWpyrwUOT
4T0EE2CUDAtG9g==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:46:23 2025 by rpki-client